vendor:
PTCPay GEN4
by:
Dark.Man
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: PTCPay GEN4
Affected Version From: PTCPay GEN4
Affected Version To: PTCPay GEN4
Patch Exists: No
Related CWE: N/A
CPE: a:ptcpay:ptcpay_gen4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
PTCPay GEN4 (buyupg.php) SQL Injection Vulnerability
PTCPay GEN4 is vulnerable to SQL injection in the buyupg.php page. An attacker can exploit this vulnerability by sending a crafted HTTP request with a malicious SQL query to the buyupg.php page. This will allow the attacker to extract sensitive information from the database, such as the admin username and password.
Mitigation:
To mitigate this vulnerability, the application should use parameterized queries and input validation to prevent malicious SQL queries from being executed.
